Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d438aedb-0354-3ba4-8499-42d292caee71.roa
File:                     d438aedb-0354-3ba4-8499-42d292caee71.roa (raw, json)
Hash identifier:          q0Y2D9OTYcF9p1P6R2xzIqY2ti8X9YFI2RME6i2fnas=
Subject key identifier:   B9:5C:B6:22:6A:9C:E2:25:0A:DB:C9:1D:36:35:6D:79:01:27:B3:E3
Certificate issuer:       /CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
Certificate serial:       010D0C9F432858479DC8E820EC09C5A343CB0140
Authority key identifier: 82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d438aedb-0354-3ba4-8499-42d292caee71.roa
Signing time:             Mon 21 Oct 2024 15:46:40 +0000
ROA not before:           Mon 21 Oct 2024 15:46:40 +0000
ROA not after:            Sun 19 Jan 2025 16:46:40 +0000
asID:                     396982
IP address blocks:        69.87.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:c8:e8:20:ec:09:c5:a3:43:cb:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e59f88b9-7d41-4286-9d26-469f2b6a2209
        Validity
            Not Before: Oct 21 15:46:40 2024 GMT
            Not After : Jan 19 16:46:40 2025 GMT
        Subject: CN=78e19b35-da3a-47c4-b08b-80bf8649c36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:15:08:7c:42:43:9a:8f:d6:47:bd:0f:1d:
                    2d:b7:e0:5b:e6:14:bb:50:e1:3e:09:1e:70:ae:e7:
                    36:07:68:ec:34:7d:7f:4d:b9:5f:95:c3:3a:c1:d4:
                    bd:a2:42:0d:51:92:03:4c:5f:13:75:b2:a6:e6:32:
                    b1:b4:8c:6f:44:5d:55:8b:d2:e5:a6:e8:cf:bd:5f:
                    e6:e7:b5:0f:63:6a:d8:77:8d:0f:72:84:e5:eb:f1:
                    84:89:33:4f:72:c6:69:51:9a:9a:07:8e:e8:77:32:
                    c1:e3:e0:a7:db:4c:cc:26:fe:04:53:61:3f:78:d0:
                    44:15:5b:df:ff:a2:14:ef:c7:d4:36:87:70:49:be:
                    c6:3c:77:be:53:f4:39:ac:16:dc:eb:8c:53:21:76:
                    3e:8d:97:ff:e1:71:05:ce:1e:05:59:bd:88:9e:7c:
                    b2:b1:00:13:0c:12:ec:e4:80:b3:7f:75:ec:64:05:
                    c8:d1:cc:72:9e:ae:b7:6d:04:2c:f0:98:e9:b5:09:
                    20:28:b7:f9:3e:ab:f6:85:f8:97:54:4e:7f:d8:b9:
                    ec:31:12:e3:7f:ce:e0:ee:09:71:b1:6e:18:fd:b5:
                    08:f8:1d:55:9f:07:57:9d:09:10:47:73:ec:51:0a:
                    02:da:2f:e7:c8:ec:15:7c:bd:bb:86:eb:dc:6f:a2:
                    fb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5C:B6:22:6A:9C:E2:25:0A:DB:C9:1D:36:35:6D:79:01:27:B3:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/d438aedb-0354-3ba4-8499-42d292caee71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209/e59f88b9-7d41-4286-9d26-469f2b6a2209.crl

            X509v3 Authority Key Identifier:
                keyid:82:8C:41:C4:F4:B0:B3:AB:7A:81:92:4D:99:6E:EF:F8:96:F5:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e59f88b9-7d41-4286-9d26-469f2b6a2209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.87.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4c:9f:f4:9b:eb:f8:d7:46:ae:e5:3f:0d:36:7b:1b:e6:31:
         8a:84:b3:25:af:3f:b1:19:3b:e4:6a:26:0e:ea:c5:42:87:bc:
         bf:7b:9b:bf:24:4c:01:ce:a3:d0:af:c7:5b:a2:de:1f:93:63:
         b7:6b:4f:80:96:dc:dd:be:4a:7b:f0:10:a6:51:f8:31:9e:15:
         7d:39:c3:39:60:a8:68:29:e2:77:41:90:e7:50:db:10:33:d5:
         ea:f6:9e:d7:cd:80:27:d2:48:40:b5:ca:36:35:d7:fa:99:f1:
         3f:86:00:9a:6b:5f:f9:f0:4e:fc:ca:0b:2e:65:de:e1:f6:55:
         f0:50:39:7a:45:1f:77:63:ee:37:cd:b1:27:c3:12:93:e5:63:
         c6:f7:5f:d8:57:8e:0d:60:83:6c:1e:1d:38:56:a8:80:c9:59:
         ed:3a:5e:d2:d4:77:d5:00:a9:51:b4:8f:1a:da:f8:1d:cf:22:
         6c:09:c8:25:e4:00:3f:23:ea:e0:43:b0:6a:4d:19:4c:0f:f4:
         59:9f:39:73:ae:e9:6b:e4:52:85:8e:1e:22:72:fa:7c:3a:18:
         63:a4:5e:c2:62:3b:19:a4:0c:9c:9f:24:67:83:78:7c:67:3f:
         42:81:78:2f:51:df:87:45:15:5c:af:50:17:1d:b3:5e:d6:b7:
         7c:3e:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:59 2024 by rpki-client on console-ams.rpki-client.org